Sign up or log in to save this to your schedule and see who's attending!

Back in the day, Containers were mostly a local development tool, only Trusted workloads were run inside them and it was expected that any given container could take all the resources of its host.

Over the past few years, things have changed a lot and Containers are now everywhere, from embedded systems all the way to the largest supercomputers. It is not unusual for there to be several hundred Containers running on any given system and having one of those bring the whole system down is simply unacceptable.

The Linux kernel offers a variety of features which combined together will let you restrict resource consumption for a given container as well as report resource usage back.

This talk will cover each of those and how to combine them to provide a good user experience, using the recent LXD work on resource limits as an example.

Stéphane Graber works as the technical lead for LXD at Canonical Ltd. He is the upstream project leader for LXC and LXD and a frequent speaker and track leader at the various containers and other Linux related events.Stéphane is also a long time contributor to the Ubuntu Linuxdistribution as an Ubuntu Core Developer and he currently sitson the Ubuntu Technical Board.On his spare time, Stéphane helps organize a yearly securityconference and... Read More →